GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elasticache, prometheus-fips, crossplane-provider-aws-rolesanywhere-fips, nfpm, tekton-chains, consul-fips, chainloop-cli, crossplane-provider-aws-directconnect-fips, trivy, chainloop-cli-fips, crossplane-provider-aws-dynamodb-fips, livekit-cl...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elasticache, prometheus-fips, crossplane-provider-aws-rolesanywhere-fips, nfpm, tekton-chains, consul-fips, chainloop-cli, crossplane-provider-aws-directconnect-fips, trivy, chainloop-cli-fips, crossplane-provider-aws-dynamodb-fips, livekit-cl...

CVE-2026-8280 vulnerabilities

Vulnerabilities for packages: gitlab-pages...

GHSA-C73G-R4CP-2XMG vulnerabilities

Vulnerabilities for packages: gitlab-pages...

CVE-2026-8144 vulnerabilities

Vulnerabilities for packages: gitlab-pages...

GHSA-FQVQ-P2GC-C297 vulnerabilities

Vulnerabilities for packages: gitlab-pages...

GHSA-C73G-R4CP-2XMG vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-pages...

GHSA-FQVQ-P2GC-C297 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-pages...

CVE-2026-8144 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-pages...

CVE-2026-8280 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-pages...

CLEANSTART-2026-XN20660 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 18.7.1-r0

Multiple security vulnerabilities affect the gitlab-pages package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-CH77232 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 18.7.1-r0

Multiple security vulnerabilities affect the gitlab-pages-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: gatekeeper, kubernetes-dashboard-auth, pulumi-language-yaml, cloudprober, helm, cert-manager-cmctl, redka, grafana-rollout-operator, keda, telegraf, crossplane-provider-aws-cloudformation, sriov-network-device-plugin, temporal-server, argo-events,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: gatekeeper, rancher-system-upgrade-controller, telegraf, kubelet-csr-approver, timoni, newrelic-infra-operator, crossplane-provider-aws-cloudwatchlogs, opensearch-k8s-operator, kube-rbac-proxy, crossplane-provider-aws-kinesis, bank-vaults, rancher-webhook,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: gatekeeper, rancher-system-upgrade-controller, telegraf, kubelet-csr-approver, timoni, newrelic-infra-operator, crossplane-provider-aws-cloudwatchlogs, opensearch-k8s-operator, kube-rbac-proxy, crossplane-provider-aws-kinesis, bank-vaults, rancher-webhook,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: gatekeeper, kubernetes-dashboard-auth, pulumi-language-yaml, cloudprober, helm, cert-manager-cmctl, redka, grafana-rollout-operator, keda, telegraf, crossplane-provider-aws-cloudformation, sriov-network-device-plugin, temporal-server, argo-events,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: gatekeeper, rancher-system-upgrade-controller, telegraf, kubelet-csr-approver, timoni, newrelic-infra-operator, crossplane-provider-aws-cloudwatchlogs, opensearch-k8s-operator, kube-rbac-proxy, crossplane-provider-aws-kinesis, bank-vaults, rancher-webhook,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: eks-distro-fips, beats-fips, crossplane-provider-aws-elasticache, k8ssandra-client-fips, prometheus-fips, apache-exporter, consul-fips, yunikorn-k8shim-fips, terraform-provider-pagerduty, contour-fips, livekit-cli, crossplane-provider-aws-dynamodb-fips,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: eks-distro-fips, beats-fips, container-object-storage-interface-fips, nri-discovery-kubernetes-fips, runc-fips, crossplane-provider-aws-elasticache, k8ssandra-client-fips, prometheus-fips, ipfs-cluster-fips, nfpm, apache-exporter, consul-fips, litefs,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: eks-distro-fips, beats-fips, container-object-storage-interface-fips, nri-discovery-kubernetes-fips, crossplane-provider-aws-elasticache, k8ssandra-client-fips, prometheus-fips, ipfs-cluster-fips, nfpm, apache-exporter, consul-fips, litefs, yunikorn-k8shim-fips,...